seal

type GenerateOption func(o *GenerateOptions)

type GenerateOptions struct {
	DCKDMasterKey *memguard.LockedBuffer
	DCKDTarget    string
	RandomSource  io.Reader
}

type Strategy interface {
	// CenerateKey create an key pair used as container identifier.
	GenerateKey(...GenerateOption) (publicKey, privateKey string, err error)
	// Seal the given container using the implemented algorithm.
	Seal(io.Reader, *containerv1.Container, ...string) (*containerv1.Container, error)
	// Unseal the given container using the given identity.
	Unseal(*containerv1.Container, *memguard.LockedBuffer) (*containerv1.Container, error)
}